immudb announced a connector to store events and data
gathered by leading Security Operations Center (SOC) and Security
Information and Event Management (SIEM) tools from Splunk, Elastic, plus
IBM QRadar XDR and Microsoft Sentinel.
"It's important to store logs and events data and know that it can be
trusted in six months, one year, or even five years from now, which is
essential in the event of a security issue discovery and then audit and
forensic analysis to go back in time to understand what happened and
when," said Moshe Bar, co-founder and CEO of Codenotary, the primary
contributor to the open source immudb project. "From our experience,
it's not uncommon to have enterprise SOC platforms tracking 100,000
events per second or more."
Only immudb is capable of storing SOC and SIEM data like logs and events
with cryptographic verification and at volumes that exceed millions of
entries per second. The data is fully searchable to help with
remediation in the event of a security issue.
"A Security Operations Center (SOC) must constantly be able to trust the
validity, immutability, and traceability of the recorded logs," said
Martin Lechmann, senior information security consultant, Swisscom AG.
"With Codenotary's immudb and the new immudb extension, these
fundamental aspects of the SOC can be optimally addressed."
Unlike other databases, immudb is built on a zero-trust model: history
is preserved and can't be changed. Data in immudb comes with
cryptographic verification at every transaction to ensure there is no
tampering possible. immudb can be deployed in cluster configurations
on-premises or in the cloud for demanding applications that require high
scalability, up to billions of transactions per day, and high
availability. The support of both key-value along with SQL makes it
simple to use immudb in new and existing applications. Support for
Amazon's S3 storage cloud provides immudb with virtually unlimited data
storage capacity. With immudb's Time Travel feature, organizations can
travel back-and-forth in time and see the change history of their data.
immudb is capable of protecting sensitive data for workloads that
require the utmost in security. Codenotary uses immudb to underpin its
software supply chain security product. There have been more than 15
million downloads of immudb so far.